Security Hardening

Common Problems 114937

SELinux Denies Web App Access to Custom Directory

🟡 Medium   ⏱ 5–30 min  Last verified: 22 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
FreeBSD 12 — elm — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — elm — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: elm — remote buffer overflow in Expires header Upstream summary: Ulf Harnhammar has discovered a remotely exploitable buffer overflow in Elm e-mail client when parsing the Expires header of an […]

Read more
FreeBSD 12 — xemacs — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xemacs — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]

Read more
FreeBSD 12 — wget-devel — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wget-devel — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wget — multiple HTTP client download filename vulnerability Related CVEs: CVE-2004-1487 CVE-2004-1488 CVE-2010-2252 Upstream summary: GNU Wget version 1.12 and earlier uses a server-provided filename instead of the original URL […]

Read more
Ubuntu 14.04 — libass — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libass — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4797-1 Related CVEs: CVE-2016-7969 CVE-2016-7970 CVE-2016-7972 CVE-2020-24994 Upstream summary: It was discovered that LibASS incorrectly handled certain ASS files. A remote attacker could possibly use this issue to cause a […]

Read more
openSUSE Tumbleweed — librepo0 — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — librepo0 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2020:1289-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14352 Upstream summary: A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths […]

Read more
Ubuntu 14.04 — drupal7 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — drupal7 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7658-1 Related CVEs: CVE-2020-11023 CVE-2020-11022 CVE-2020-13671 CVE-2020-28948 CVE-2020-28949 CVE-2015-2559 CVE-2015-2749 CVE-2015-2750  +2 more Upstream summary: It was discovered that Drupal incorrectly parsed untrusted HTML. A remote attacker could possibly use […]

Read more
Oracle Linux 8 — java-1.8.0-openjdk — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — java-1.8.0-openjdk — vulnerability — patch and remediation guide (ELSA-2019-3134)

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3134 Related CVEs: CVE-2019-2949 CVE-2019-2964 CVE-2019-2973 CVE-2019-2983 CVE-2019-2962 CVE-2019-2975 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
FreeBSD 12 — mythtv-frontend — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mythtv-frontend — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2015-3395 CVE-2015-3417 CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822  +12 more Upstream summary: NVD reports: An issue was discovered in the FFmpeg package, where vp3_decode_frame […]

Read more
Arch Linux — libtasn1 — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — libtasn1 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201706-3 Related CVEs: CVE-2017-6891 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 4.10-1. Fixed in: 4.11-1. Group: AVG-285. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
CHAT